# 10.E1 S4 — shared stock-default classification corpus.
#
# Consumed by BOTH implementations of the "effectively stock /etc/pf.conf"
# heuristic, which must classify every file here identically:
#   - C:  ogma_pf_body_is_effectively_default (daemon/common/pf_canonical.c),
#         pinned by daemon/test/test_pf.c
#   - sh: pf_is_effectively_default (scripts/ogmaprotect-setup),
#         pinned by t/ogmaprotect_setup.t
#
# The expected classification is encoded in the FILENAME:
#   default-*.conf   -> effectively stock (no operator firewall)
#   operator-*.conf  -> operator policy (brownfield: do-not-clobber / S4 gate)
#
# Add cases in pairs of intent: every new stock form needs a near-miss
# operator twin, or the corpus stops guarding the strictness the S4 review
# (S4-SEC-2/F5) demanded. LF-only (see .gitattributes daemon/test/fixtures/**).
